Baptist Health System suffered a data breach incident after an unauthorized party gained access to the company’s computer network after installing a line of malicious code on the System’s website.
The breach compromised the full names, dates of birth, addresses, Social Security numbers, health insurance information, medical information and billing information of more than 1.2 million patients in Texas alone and many more in other areas.
The health system suspended the affected systems to restrict further access and began working with a cybersecurity firm to investigate the incident.
Source: https://www.jdsupra.com/legalnews/baptist-health-system-announces-data-7151699/
TPRM report: https://scoringcyber.rankiteo.com/company/baptist-health-system-
"id": "bap1568722",
"linkid": "baptist-health-system-",
"type": "Breach",
"date": "06/2022",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"{'affected_entities': [{'customers_affected': 'More than 1.2 million patients '
'in Texas alone',
'industry': 'Healthcare',
'location': ['Texas', 'Other areas'],
'name': 'Baptist Health System',
'type': 'Health System'}],
'attack_vector': 'Malicious Code Injection',
'data_breach': {'number_of_records_exposed': 'More than 1.2 million in Texas '
'alone',
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Dates of birth',
'Addresses',
'Social Security numbers',
'Health insurance information',
'Medical information',
'Billing information']},
'description': 'Baptist Health System suffered a data breach incident after '
'an unauthorized party gained access to the company’s computer '
'network after installing a line of malicious code on the '
'System’s website. The breach compromised the full names, '
'dates of birth, addresses, Social Security numbers, health '
'insurance information, medical information and billing '
'information of more than 1.2 million patients in Texas alone '
'and many more in other areas. The health system suspended the '
'affected systems to restrict further access and began working '
'with a cybersecurity firm to investigate the incident.',
'impact': {'data_compromised': ['Full names',
'Dates of birth',
'Addresses',
'Social Security numbers',
'Health insurance information',
'Medical information',
'Billing information']},
'initial_access_broker': {'entry_point': 'Malicious Code on Website'},
'investigation_status': 'Investigation Ongoing',
'response': {'containment_measures': 'Suspended affected systems',
'third_party_assistance': 'Cybersecurity Firm'},
'threat_actor': 'Unauthorized Party',
'title': 'Baptist Health System Data Breach',
'type': 'Data Breach'}